Viewing a data table

Expand all | Collapse all

When viewing data tables in different sections of the application web interface, you may be able to use the following functions:

• Configuring the columns display and order

  Depending on the specific section of the application web interface, you can enable and disable the display of specific data in the table and configure which columns to display and in which order.

  To configure the table display settings:

  1. Click the  icon to open the window for configuring how the table is displayed.
  2. If enabling and disabling the display of specific data is available for the table (for example, display of remediated and accepted risks in the devices table), configure the settings in the upper part of the window.
  3. In the Displayed columns settings group, select the check boxes opposite the settings that you want to view in the table. You must select at least one setting.
  4. If you want to change the order in which columns are displayed, select the name of the column that needs to be moved to the left or right in the table and use the buttons containing an image of the up or down arrows.

  The selected columns will be displayed in the table in the order you specified.

• Filtering based on standard time periods
  1. When working with a table in a section of the application web interface, open the Detection period, Run period or Period drop-down list in the toolbar.
  2. In the drop-down list, select one of the standard periods (for example, Last 24 hours).

  The table will display data for the period you specified.

• Filtering based on a specified time period
  1. In a table of the application web interface section, on the toolbar, open the Period, Detection period, or Run period drop-down list.
  2. In the drop-down list, select Specify a period.

     The start and end date and time of the filtering period are displayed on the right of the drop-down list.

  3. Click the date of the start or end of the period.

     The calendar opens.

  4. In the calendar, specify the date for the start and end boundaries of the filtering period. To do so, select a date in the calendar (the current time will be indicated) or manually enter the value in the format DD-MM-YYYY hh:mm:ss. If you do not need to specify the date and time of the filtering period end boundary, you can choose not to select a date or you can delete the current value.
  5. Click OK.

  The table will display data for the period you specified.

• Filtering by columns

  To filter a table by a specific column:

  1. In a table of a section of the application web interface, click the filtering icon in the relevant column.

     The filtering window opens.

  2. Use the interface elements in the filter window to configure the settings, as necessary. Below are some special considerations when configuring a filter in certain columns.
  3. Click OK.

  If the filter window contains the Complex parameter

  Use the Complex parameter to specify multiple values combined by the logical operator AND. To add different types of values, use the Add condition (AND) button.

  If there is a column for groups of devices

  1. In the filter window, click the icon in the right part of the field to select a group.

     The Select group in tree window appears.

  2. In the device group tree, select the relevant group and click the Select button.

     The path to the selected group is displayed in the field in the filter window.

  If there is a column for risks associated with devices

  1. In the filter window, use the Exclude devices with risks toggle button to configure the display of devices in the table:
     • To view only risk-free devices, turn on the toggle button.
     • To view the devices with risks and to configure the settings for filtering by risk, turn off the toggle button.
  2. If necessary, use the following controls to configure the settings for filtering devices with risks:
     • Risk scores – lets you define a range of risk score values for displaying devices with risks whose scores are within the specified range.
     • Status – groups buttons for enabling and disabling filtering based on the statuses of risks (the buttons are displayed if the Show remediated and accepted risks check box is selected in the devices table display settings).

  If there is a Protocol column displaying supported application-layer protocols

  1. In the filter window, specify the necessary protocol in the Protocols field. To do so, start entering the name of the protocol and select the relevant protocol from the drop-down list (the list of suitable protocols is automatically expanded when the value in the Protocols field is changed).
  2. If necessary, sort the opened list of protocols by clicking the Sort link.
  3. If you want add another protocol, click the Add protocol button and specify the other protocol in the opened field.
  4. If you want to delete one of the specified protocols, click the icon in the filter window. You can also delete all specified protocols by clicking the Default filter link in the filter window.

  If there is a Protocol column that displays all supported protocols in the form of a protocol stack tree

  1. In the filter window, configure how the relevant tree elements are displayed by using the + and - buttons next to the names of protocols that contain protocols of subsequent layers.

     The table columns provide the following information:

     • Protocol – name of the protocol within the protocol stack tree.
     • EtherType – number of the next-level protocol within the Ethernet protocol (if the protocol has a defined number). It is displayed in decimal format.
     • IP number – number of the next-level protocol within the IP protocol (if the protocol has a defined number). It is indicated only for protocols within the IP protocol structure. It is displayed in decimal format.
  2. If necessary, use the search field above the table to find relevant protocols.
  3. In the list of protocols, select the check boxes opposite the protocols by which you want to filter events.

     If you select or clear the check box for a protocol that contains nested protocols, the check boxes for the nested protocols are also automatically selected or cleared.

  If filtering based on the table cell values is allowed

  1. Select the relevant items in the data table.
  2. Move your mouse cursor over a cell of the relevant column of one of the selected items.
  3. Right-click to open the context menu.
  4. In the context menu, select the command that shows all items containing the specific value or values of a parameter.

  Modes for filtering events within incidents

  When filtering the events table in tree display mode, incidents that meet the filtering criteria may be presented in the following variants:

  • Displayed with all nested elements
  • Displayed only with the nested elements that also meet the defined filtering criteria

  You can select the relevant display option for incidents by using the Show embedded events when filtering check box when configuring the table.

• Table search

  In a table of a section of the application web interface, you can find relevant items by using the Search <type of displayed items> field. The field is displayed in the right part of the section.

  A search can be run on selected table columns.

• Resetting the defined filter and search settings

  In a table of a section of the application web interface, you can reset the defined filter and search settings by using the Default filter button in the toolbar. The button is displayed if search or filter settings are defined.

• Table sorting
  1. In a table of a section of the application web interface, click the header of the column by which you want to sort.

     The headers of columns that can be sorted are displayed as links.

  2. If sorting is performed based on a column that displays different types of values (for example, the Side 1 column in the Risks section), use the drop-down list of the column header to select the parameter that will be used for sorting.
  3. If you need to sort the table based on multiple columns, press the SHIFT key and hold it down while clicking the headers of the columns by which you want to sort.

  The table will be sorted by the selected column. When sorting by multiple columns, the rows of the table are sorted according to the sequence of column selection. Next to the headers of columns used for sorting, you will see icons displaying the current sorting order: in ascending order or descending order of values.